Spirion (Identity Finder) - Using Regular Expressions to Find Custom Data

In Spirion (Identity Finder), it is possible to find custom information using regular expressions. Spirion uses the Perl Regular Expression Syntax provided by the Boost libraries.

This article is not a tutorial for regular expressions, but a guide to how to use them in Spirion.

For a brief overview of regular expressions see the page Perl Expression Syntax.

NOTE: The screenshots were taken with Identity Finder. The modern Spirion interface differs in appearance, but the steps required to search with regular expressions has not changed.


This article covers the following topics: Searching for Custom Data - Windows Client
To specify custom information within the Windows client:
  1. Open Spirion, click the Files tab.
  2. July19a.PNG

  3. Click the Settings button on the bottom of the popup that appears.
  4. Select Custom Types.
  5. July19b.PNG

  6. Enter a regular expression and give it a name. That name appear in Spirion reports as the data type, so select something concise and descriptive.
  7. July19c.PNG

  8. Click add to apply. There are also Remove and Cancel buttons if you make a mistake.
  9. July19d.PNG

CAUTION: Making regular expressions too simple will result in a large number of false positive results. The expression in the example above would recognize 9-digit zip codes, and many other numbers is the same format. It is best practice to test your expression by scanning a small folder that includes multiple data types to be sure the expression is working as you intend before scanning the entire device.

Searching for Custom Data - Mac Client
To specify custom information within the Mac client:
  1. Open the Preferences menu and navigate to the OnlyFind tab.
  2. Screenshot2010-11-05at12.50.44PM.png

    Screenshot2010-11-05at12.52.12PM.png

  3. Choose Custom Type from the drop down menu. You can then enter your regular expression into the empty field. When you are finished, click the Add button and then click OK.
  4. Screenshot2010-11-05at12.53.32PM.png

  5. You can now search for your custom information by selecting the Custom Type from the Identities menu.
  6. OnlyFindMac.png




Keywords:idf pii Spirion identity finder data discovery mac windows custom regex regular expression perl   Doc ID:15501
Owner:Hui-Chun K.Group:Office of Cybersecurity
Created:2010-11-04 18:00 CSTUpdated:2022-07-12 11:16 CST
Sites:DoIT Help Desk, Office of Cybersecurity
Feedback:  0   0